CVE-2025-32052

A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.

A moderate severity heap buffer over-read flaw was found in the libsoup content sniffer, in the sniff_unknown() function of soup-content-sniffer.c. A remote attacker who controls an HTTP server can send a crafted HTTP response to a client application using libsoup, causing the content sniffer to read beyond the bounds of a heap-allocated buffer when determining the content type. This out-of-bounds read can lead to disclosure of information from process memory or cause the client application to crash, consistent with the Red Hat severity rating of Moderate (CVSS 6.5, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L), which matches the upstream rating. Red Hat Enterprise Linux 8 and 9 (libsoup), Red Hat In-Vehicle OS (libsoup), and products shipping the mingw-libsoup variant are affected, and a fix is being pursued through the respective product streams. Red Hat Enterprise Linux 10 is not affected because the vulnerable code is not present in its libsoup3 packages.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

No mitigation is currently available for this vulnerability.